ROOT-APP-PYPI-CVE-2026-21226 CVE-2026-21226 in azure-core - Patched by Root

🗓️ 04 Aug 2026 15:55:43Reported by GoogleType

osv🔗 osv.dev👁 7 Views

Root patched the 2026-21226 vulnerability in rootio-azure-core for Root PyPI with multiple fixed versions.

Reporter	Title	Published	Views	Family All 61
IBM Security Bulletins	Security Bulletin: IBM IBM Edge Data Collector uses azure_core-1.14.0-py2.py3-none-any.whl which is vulnerable to CVE-2026-21226.	27 Feb 202612:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to remote code execution (CVE-2026-21226)	5 Feb 202612:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx.data integration (Data Observability) is affected by an execute code over a network due to azure_core vulnerability.	28 Jul 202622:32	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses azure-core 1.37.0 and setuptools 75.8.0 which are vulnerable to CVE-2026-21226 and CVE-2025-47273.	27 May 202616:07	–	ibm
BDU FSTEC	The vulnerability of the Azure Core client library for Python, related to deserialization mechanism flaws, allows attackers to execute arbitrary code.	26 Jan 202600:00	–	bdu_fstec
Chainguard	CVE-2026-21226 vulnerabilities	20 Jan 202619:20	–	cgr
Circl	CVE-2026-21226	13 Jan 202618:01	–	circl
CNNVD	Microsoft Azure 代码问题漏洞	13 Jan 202600:00	–	cnnvd
CVE	CVE-2026-21226	13 Jan 202618:04	–	cve
Cvelist	CVE-2026-21226 Azure Core shared client library for Python Remote Code Execution Vulnerability	13 Jan 202618:04	–	cvelist

09 Aug 2026 23:00Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.5

EPSS0.00804

vulnerability 2026 21226 rootio azure core root pypi multiple fixed versions